Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fedora has released an update for calibre, version 9.13.0, enhancing its e-book management features and addressing several vulnerabilities including potential …
Fedora 44 has released an update for Coturn 4.17.2, addressing security fixes and various improvements, including protocol enhancements, changes in log formatt…
Oracle Linux Security Advisory ELSA-2026-54512 announces the update of gnome-remote-desktop for Oracle Linux 10, addressing CVE-2026-18358 by backporting conne…
Gentoo Linux has issued a high-severity advisory for multiple vulnerabilities in Dnsmasq, including potential remote code execution, urging users to upgrade to…
Fedora 43 has updated coturn to version 4.15.0, introducing security fixes, new features for mobility handoff, improved logging, and better client utilities fo…
The Fedora update for nginx-mod-brotli version 1.0.0~rc-13 includes a rebuild for nginx version 1.30.4, addressing various CVEs and improving Brotli compressio…
A security update addresses three vulnerabilities in jackson libraries affecting SUSE Linux Enterprise Server versions 16.0, enhancing protection from potentia…
CVE-2026-0257's GlobalProtect authentication bypass went from advisory to active exploitation in four days. The recurring pattern of perimeter device failures …
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentia…
Too many changes to list. See: https://github.com/domoticz/domoticz/blob/2026.1/History.txt This also fixes a security vulnerability.
MariaDB 11.8.5 Release notes: https://mariadb.com/docs/release-notes/community- server/11.8/11.8.5
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP) which potentially allows potential buffer over…
Automatic update for bootc-1.1.5-1.fc41. Changelog for bootc * Mon Feb 10 2025 Packit - 1.1.5-1 - Update to 1.1.5 upstream release
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
GNOME Remote Desktop would allow unintended access to sensitive information or remote desktop connections.
Several security vulnerabilities have been discovered in knot-resolver, a caching, DNSSEC-validating DNS resolver which may allow remote attackers to bypass DN…
F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution.The issue, rooted in …
Protect your Linux servers from XorDdos, a botnet scanning the internet for SSH servers with weak passwords, Microsoft warns.
Microsoft has once again alerted users about a new Sysrv botnet variant that targets web…Microsoft Warns About New Sysrv Botnet Variant Attacks Web Servers on …
Months after researchers detailed Braktooth bugs, they now have released the PoC exploit to the…US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Pub…
